ID

VAR-E-201702-0541


CVE

cve_id:CVE-2016-9355

Trust: 0.3

cve_id:CVE-2016-8375

Trust: 0.3

sources: BID: 96116 // BID: 96113

TITLE

Alaris 8015 PC unit CVE-2016-9355 Information Disclosure Vulnerability

Trust: 0.6

sources: BID: 96116 // BID: 96113

DESCRIPTION

Alaris 8015 PC unit is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Trust: 0.6

sources: BID: 96116 // BID: 96113

AFFECTED PRODUCTS

vendor:bdmodel:alaris pc unitscope:eqversion:80159.5

Trust: 0.3

vendor:bdmodel:alaris pc unitscope:eqversion:80159.4

Trust: 0.3

vendor:bdmodel:alaris pc unitscope:eqversion:80159.7

Trust: 0.3

vendor:bdmodel:alaris pc unitscope:eqversion:80000

Trust: 0.3

sources: BID: 96116 // BID: 96113

EXPLOIT

Attackers can use standard, readily available tools to access the internal flash memory of the affected device.

Trust: 0.6

sources: BID: 96116 // BID: 96113

PRICE

Free

Trust: 0.6

sources: BID: 96116 // BID: 96113

TYPE

Design Error

Trust: 0.6

sources: BID: 96116 // BID: 96113

CREDITS

Becton, Dickinson and Company (BD)

Trust: 0.6

sources: BID: 96116 // BID: 96113

EXTERNAL IDS

db:ICS CERTid:ICSMA-17-017-02

Trust: 0.6

db:NVDid:CVE-2016-9355

Trust: 0.3

db:BIDid:96116

Trust: 0.3

db:ICS CERTid:ICSMA-17-017-01

Trust: 0.3

db:NVDid:CVE-2016-8375

Trust: 0.3

db:BIDid:96113

Trust: 0.3

sources: BID: 96116 // BID: 96113

REFERENCES

url:http://www.carefusion.com/our-products/infusion/infusion-system-devices/alaris-pc-unit

Trust: 0.6

url:https://ics-cert.us-cert.gov/advisories/icsma-17-017-02

Trust: 0.6

url:https://ics-cert.us-cert.gov/advisories/icsma-17-017-01

Trust: 0.3

sources: BID: 96116 // BID: 96113

SOURCES

db:BIDid:96116
db:BIDid:96113

LAST UPDATE DATE

2022-07-27T09:49:26.326000+00:00


SOURCES UPDATE DATE

db:BIDid:96116date:2017-03-07T04:01:00
db:BIDid:96113date:2017-03-07T03:02:00

SOURCES RELEASE DATE

db:BIDid:96116date:2017-02-07T00:00:00
db:BIDid:96113date:2017-02-07T00:00:00